Extension-Land: exploits and rootkits in your browser extensions

No ratings

Presented at DEF CON 29 by

Barak Sternberg

Browser extensions are installed anywhere, they serve as an integral part of our day-to-day web routine, from AdBlockers to Auto-Translators. But - do we know what is running inside of them? Do we know what goes deep-down inside their communication routines? How do they use their internal API’s? And how do their different JS execution contexts work?